Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit for yet another Microsoft Defender zero-day named RoguePlanet. "The exploit is a race condition, so it's a hit or miss," the researcher, who published the exploit under a new GitHub account, "MSNightmare" said. "I have managed to get a 100% success rate on
Miasma worms its way onto GitHub as attack kit goes open source
As if there weren't enough package poisonings to worry about
Reconstructing AI activity in investigations
Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven approach. This playbook helps security teams reconstruct events, assess data exposure, and detect potential threats faster. The post Reconstructing AI activity in investigations appeared first on Microsoft Security Blog.
Offboarding Humans, Leaving Zombies: The New Workforce Risk
AI agents are redefining the workforce. Discover how IT and HR must partner to secure every identity and eliminate the risk of unmanaged Zombie Agents. The post Offboarding Humans, Leaving Zombies: The New Workforce Risk appeared first on JumpCloud.
Palo Alto rebrands CyberArk as Idira — what PAM customers should do
The $25B acquisition closed in February. On May 12 Palo Alto announced Idira. Here is what changes for the operators who actually run CyberArk in production.
Passkeys are everywhere, and almost nobody is using them
Nearly half of the top 100 consumer sites now support passkeys. Real adoption stalls at 5–10%. The fixes are not technical — they are CIAM design fixes.
Your IAM platform is not ready for AI agents
Every vendor announcement in 2026 mentions AI agents. Almost none explain how an agent authenticates, gets scoped credentials, and gets audited. Here is what the gap looks like.
SOC 2 Type II Auditors Now Require Continuous Identity Posture Assessment
The audit landscape shifts from point-in-time reviews to evidence of ongoing access governance.
IAM in Canada
Regulation, innovation & incidents across the True NorthTreasury Board Mandates Phishing-Resistant MFA Across All Federal Departments by Q4 2026
The new directive requires all Government of Canada systems to implement FIDO2-compliant authentication, phasing out SMS-based MFA.
Bill C-27 AIDA Amendments Add Identity Verification Requirements for AI Systems
Ontario Digital Identity Program Expands to Include Healthcare Provider Credentialing
Alberta Municipality Confirms Active Directory Compromise Affecting 45K Citizen Records
Canadian Banks Pilot Shared KYC Identity Network Using Verified Credentials
🇨🇦 Regulatory & Compliance Tracker
MedVault Health Systems — 2.3M Records
Misconfigured SCIM provisioning endpoint exposed patient identity data.
NordikPay — 890K OAuth Tokens Leaked
Exposed refresh tokens allowed unauthorized access to customer financial accounts.
TeleCom Asia — Employee Directory Breach
LDAP injection attack exposed 340K employee records including AD credentials.
EduConnect — Student SSO Compromise
Federated SAML assertion replay attack affected 45 university systems.
RetailMax — Loyalty Program Credential Stuffing
Automated attack compromised 120K accounts using previously breached credentials.
CVE-2026-31847 — FortiAuthenticator RCE
Unauthenticated remote code execution via crafted RADIUS authentication packet.
CVE-2026-28391 — Okta OIDC Token Bypass
Token validation flaw allows authentication bypass in specific OIDC flow configurations.
CVE-2026-29104 — PingFederate XXE
XML External Entity injection in SAML metadata parser allows SSRF.
CVE-2026-30582 — Azure AD B2C Policy Injection
Custom policy XML injection allows privilege escalation in B2C tenants.
CVE-2026-31205 — Keycloak Session Fixation
Session token not rotated after authentication in specific broker flows.
Never Miss a Breach, CVE, or Industry Shift
Join thousands of IAM professionals getting the weekly Intelligence Brief every Monday morning.